Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/beba6b91-c990-3f76-92ef-937df513bd7b.roa
File:                     beba6b91-c990-3f76-92ef-937df513bd7b.roa (raw, json)
Hash identifier:          ib7HoYIPy8dAqy6ehDO0aDto6lw3FDMQlk/kINakhqQ=
Subject key identifier:   11:77:B7:A0:E5:D6:B7:AA:E4:5D:18:E5:05:64:F1:86:56:FA:F0:C7
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584CE8F772A36F2E0D55A377DD10
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/beba6b91-c990-3f76-92ef-937df513bd7b.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     19527
IP address blocks:        34.1.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:72:a3:6f:2e:0d:55:a3:77:dd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=0f25c45e-7d23-4f2e-9fb7-88dc83d0835f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:e4:3a:e3:ab:10:7c:07:92:8a:47:7e:26:
                    88:a8:04:5a:59:65:bf:c8:e4:e1:bb:c3:32:e4:72:
                    83:b1:08:d1:2c:d1:a3:9e:0e:92:12:37:4e:28:d9:
                    82:81:23:3e:b0:0e:86:ef:9f:c2:49:80:8c:78:d8:
                    f9:3d:ce:8c:9b:4b:0b:65:30:a4:65:25:02:85:e5:
                    72:7b:e9:42:60:d1:2c:ab:30:f1:24:29:bd:47:96:
                    a5:7b:cd:0a:b3:82:26:6b:f8:06:39:79:b7:9b:ad:
                    47:b2:25:d8:14:f6:48:1e:2f:f8:e8:a0:ec:ef:e8:
                    b8:35:39:1d:11:95:4f:53:2f:cd:3d:d9:02:10:8c:
                    bf:e8:18:04:22:1a:9e:c3:9c:8e:3e:7b:56:86:d5:
                    7d:6a:31:98:53:2e:07:e1:4c:88:44:b7:fe:5b:ae:
                    df:e9:16:57:de:f3:62:5c:76:eb:52:d5:4a:29:48:
                    93:96:a7:e8:43:2a:a8:30:ae:67:5d:37:b5:78:b8:
                    cf:26:9f:4b:cb:74:89:ce:ce:b7:69:00:e7:b1:c9:
                    0e:68:9c:8b:c1:6b:66:c4:48:ed:2a:aa:a9:b6:71:
                    d7:d0:ce:38:8a:a4:ca:b5:fb:c1:59:99:69:4d:d7:
                    5c:98:58:5b:1f:fd:c7:93:8d:8d:0e:e6:68:6d:17:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:77:B7:A0:E5:D6:B7:AA:E4:5D:18:E5:05:64:F1:86:56:FA:F0:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/beba6b91-c990-3f76-92ef-937df513bd7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ae:00:ec:27:e5:92:a2:60:e0:8a:52:fd:31:a5:f8:f9:c3:
         49:e3:cf:2e:8d:d0:54:c5:89:ab:b6:ad:76:d8:fd:22:46:a6:
         8e:60:07:d8:76:ff:eb:da:b6:54:42:b0:d8:b5:44:e9:fa:06:
         e6:4e:2b:40:0a:29:b9:a9:ac:46:26:2f:5d:b4:76:e1:ed:d8:
         31:3e:fa:d8:b2:21:bd:d2:3d:9f:16:e2:0a:e8:44:8d:75:d6:
         84:bd:08:89:91:1b:2c:38:0a:0a:c6:38:1f:22:a2:51:98:8b:
         e7:b4:65:18:b7:10:ae:f8:21:e6:b2:d8:6f:61:55:46:a9:33:
         b1:ab:09:c0:e4:6c:53:ce:b0:60:99:5f:da:d1:4b:39:a6:55:
         f1:1f:b8:c1:40:da:f8:24:79:5b:0a:82:0f:cf:d4:0d:0a:91:
         c5:cd:d4:06:bb:c5:dc:55:19:5e:7e:69:3d:e9:84:56:a3:90:
         d5:7a:2f:a8:15:53:79:d3:5e:9b:28:91:44:23:a6:f4:09:ef:
         53:a0:25:3c:b0:36:ea:c6:ed:69:72:66:de:4e:10:a4:ca:49:
         27:10:f2:40:b1:ae:1e:39:0e:51:a4:78:7a:d3:d1:90:b7:89:
         ba:25:b0:11:89:1d:b3:e9:13:6e:76:5e:7b:d7:96:93:c7:f6:
         94:0d:81:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:23:47 2026 by rpki-client